Specifying privileges for an Access of Role to Object rule

You can make these updates by using Access Manager or the Access of Role to Object rule form. The production level values that you can specify are different on these two forms. For more information on Access Manager, see Access Manager landing page.

A privilege associated with an Access of Role to Object rule is granted to users who have the access role, when they work with instances of the rule's access class (or child class), on a system that has a specific production level (or lower).

• To remove a privilege, click the Delete row icon, or update the Level to 0 or blank.
• To add a privilege, click the Add a row icon and complete the following information.

To update a rule:

1. In the Explorer panel, click Records > Security > Access of Role to Object, open the rule you want to change, and click the Privileges tab.
2. In the Privilege field, enter the name of the privilege to grant to this role. The privilege must already be defined for this access class.
3. In the Level field, enter a When rule name or a production level. At run time, the system evaluates this value in the following ways:
   • If you enter a When rule name, the system uses the access class and class inheritance to find the Access When rule, and then evaluates the When rule to see if access is granted.
   • If you enter a production level, the system compares this level with the production level of the current system. The privilege is granted only if the privilege's production level is greater than or equal to the system's production level. Enter 0 or leave blank to provide no access. A value of 5 allows access to all systems.